This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D9AFDBC2400111EFBB30C475C4F9AE02.roa
File: D9AFDBC2400111EFBB30C475C4F9AE02.roa (raw, json)
Hash identifier: DOOQJ3+cGj42ubOtQXY1kZrabEjzpiZAb+fDiUicu64=
Subject key identifier: 9F:3A:80:77:DD:CB:11:BB:F6:A5:AD:D5:C5:EF:12:C0:3B:BC:D3:62
Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Certificate serial: 0AD5
Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D9AFDBC2400111EFBB30C475C4F9AE02.roa
Signing time: Sat 08 Nov 2025 19:09:59 +0000
ROA not before: Sat 08 Nov 2025 19:09:59 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 138195
IP address blocks: 27.124.8.0/24 maxlen: 24
202.79.160.0/24 maxlen: 24
202.79.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Validity
Not Before: Nov 8 19:09:59 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690f9587-77c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:db:53:1f:94:3e:14:f5:1d:92:0e:2b:90:
75:97:ee:0a:56:c2:cd:c7:da:ac:4e:c7:ff:a5:b5:
6b:32:e4:2a:f7:72:81:3f:ed:3a:17:d8:ef:e7:0c:
4d:73:88:30:62:2e:8c:25:d1:c2:f6:92:b4:65:84:
7c:ab:7f:20:73:4b:1e:cd:ee:0a:ad:6c:99:bf:20:
94:ce:ec:5f:7a:71:91:05:03:60:12:b8:2d:63:8d:
30:ba:28:e1:0b:e9:75:ad:1f:39:ac:a6:55:bc:41:
76:e6:2d:92:ba:87:be:18:93:3b:0c:5d:c2:b7:e3:
84:15:2c:8c:ed:ab:18:d0:c9:ab:67:ae:cf:c9:4d:
8b:c4:50:a0:71:c4:82:06:9d:cf:a8:b9:ce:50:85:
32:03:ef:34:45:fb:fa:06:e6:64:51:14:c9:34:da:
65:bc:d2:d0:1a:bf:c2:cc:53:eb:84:f8:47:78:17:
ee:74:1a:31:d7:b9:fa:bc:d0:41:11:55:ac:11:15:
e8:2c:12:8d:9f:26:db:82:e2:63:45:dc:29:52:af:
e1:35:d8:49:83:c5:46:76:19:c9:be:59:7a:41:89:
16:94:90:fa:d8:98:98:b2:83:b4:ef:4c:ee:30:33:
8f:68:29:6f:08:43:26:fc:79:3d:5d:74:b2:57:14:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3A:80:77:DD:CB:11:BB:F6:A5:AD:D5:C5:EF:12:C0:3B:BC:D3:62
X509v3 Authority Key Identifier:
keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D9AFDBC2400111EFBB30C475C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.124.8.0/24
202.79.160.0/23
Signature Algorithm: sha256WithRSAEncryption
79:9a:eb:9d:93:8a:56:c0:50:f8:20:50:64:f0:3f:6c:23:34:
dd:78:03:a1:bb:88:94:4b:22:c5:a1:c3:5c:bc:ec:f7:cd:0b:
7b:b4:db:4f:27:32:53:7a:05:58:59:57:07:a5:2e:ab:65:39:
97:54:27:cb:17:0c:12:d7:ba:d3:6d:83:42:57:18:38:37:ce:
14:a7:c4:9c:dc:1f:d8:b1:a8:43:c0:f7:f0:6b:4a:ac:26:82:
19:18:24:fb:c8:0f:95:8a:11:67:bb:f3:65:1f:c9:51:b6:26:
e3:34:1e:23:1b:95:f0:7b:92:4e:02:52:d1:9e:f3:06:2e:3c:
69:9c:fb:88:bd:8e:70:56:2c:3b:d7:46:8b:14:a7:b6:15:40:
03:cf:47:2e:43:fe:14:d3:5e:8c:eb:cf:f2:91:ed:5a:00:84:
4c:fd:7b:91:75:4f:a2:26:d3:c4:e7:dd:d0:2b:d6:81:1e:26:
2f:cc:e1:76:54:0c:38:16:e8:57:e3:cf:f2:e0:85:92:3f:51:
82:22:d7:a7:a8:63:4f:be:ab:d8:21:1a:d8:51:ff:d3:a7:39:
78:2a:1a:73:45:73:7f:61:a4:9d:d4:a9:7c:c8:46:a0:6d:69:
b5:63:bf:0d:78:5d:01:3f:a6:19:eb:8c:eb:dd:9f:46:dc:04:
85:fd:3b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:44:39 2025 by rpki-client